Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230342e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230342e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          xTUSZWsKD+rHwzN0BZruvms7EU0i9S7jmhP0gUnNcqQ=
Subject key identifier:   45:DE:91:DB:FF:B8:66:AC:10:36:6F:3C:8A:43:98:F1:DF:AA:08:D5
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       5761F6BCC06E871A14353E1BC7708C578C17D1AF
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230342e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     52330
IP address blocks:        190.184.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:61:f6:bc:c0:6e:87:1a:14:35:3e:1b:c7:70:8c:57:8c:17:d1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=45DE91DBFFB866AC10366F3C8A4398F1DFAA08D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:97:31:0f:5d:2a:d4:66:b5:27:7c:c0:85:
                    44:37:c1:d0:7a:af:88:a7:be:d6:d7:6f:e0:06:58:
                    bd:ab:24:cf:d3:cf:17:29:c8:03:8d:d5:1a:6a:d0:
                    59:13:92:40:36:bd:2d:33:f4:7d:df:68:d4:9a:86:
                    4c:eb:cf:f7:e5:df:be:d9:9f:4e:55:77:b1:cf:57:
                    4e:6a:9d:7d:ba:14:0d:0d:f8:77:57:69:a1:68:55:
                    68:bc:d1:5c:6c:51:1e:a0:bc:b3:c8:d3:83:a9:77:
                    b4:24:a8:ac:2e:16:9f:cc:22:8c:a1:be:76:5d:2e:
                    4d:74:c1:0d:33:95:4e:fe:74:2d:9f:e0:fb:39:02:
                    76:5d:75:74:33:39:5e:11:02:43:26:73:81:43:31:
                    09:bb:e3:bf:19:ab:0f:91:99:81:7f:2a:55:6d:bb:
                    ec:9c:ef:6e:90:4d:eb:44:8c:f5:de:c6:bc:50:d4:
                    99:b1:fc:81:02:1c:63:bb:af:c5:b3:ae:b0:04:21:
                    19:37:4e:d0:20:e2:59:18:64:fc:1e:1f:7c:64:3d:
                    0a:2c:28:e3:d1:5c:5e:6f:ee:c8:94:07:e3:4a:a9:
                    28:ca:c9:00:39:3f:1d:ed:7f:48:b4:c8:18:f0:17:
                    12:f6:79:48:98:af:f5:2b:9d:be:0e:81:07:a8:af:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DE:91:DB:FF:B8:66:AC:10:36:6F:3C:8A:43:98:F1:DF:AA:08:D5
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230342e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:2c:6d:c9:60:fe:08:a5:f4:0e:9b:dd:9d:26:65:e4:b2:
         20:97:36:83:3c:79:d0:32:97:06:e3:5f:57:23:ee:78:4c:00:
         e8:a8:da:b3:70:58:4c:3d:0f:61:68:eb:40:85:82:5d:92:92:
         60:f8:3d:ba:97:a7:54:e4:f0:a5:a7:58:ad:1e:4b:1b:60:23:
         9d:05:0f:90:1b:09:d7:26:48:0a:bd:7a:b8:62:a0:5f:7a:1b:
         78:05:12:be:1c:6d:3f:0b:a8:60:db:96:79:e9:59:30:88:2d:
         8b:c6:18:8e:b7:35:a9:dd:a7:89:5b:f3:5f:26:7f:a2:74:7f:
         2a:fd:fd:b4:81:b1:ab:e3:4b:6f:a0:75:80:05:c4:6a:18:18:
         45:3a:1d:31:62:80:b7:aa:d4:ac:c4:7e:1c:71:30:69:a2:02:
         4a:0c:d7:65:7f:b8:be:6a:2c:c7:77:7d:50:68:5b:09:a4:cf:
         49:0e:36:35:2b:78:33:67:38:60:fb:fb:cb:bd:fd:de:29:c2:
         5d:43:de:4d:ef:52:67:04:a7:a3:4b:f2:24:e9:c9:6c:25:95:
         0f:78:b1:a1:14:c2:1c:53:41:63:19:a8:8c:f2:4d:45:72:22:
         78:2b:83:46:af:02:d9:90:16:b4:22:91:0b:4b:00:c3:76:68:
         ea:61:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org